Personal and Medical Records of 160,312 Americans Potentially Exposed After Major Data Breach Hits Healthcare Firm

The sensitive data of hundreds of thousands of Americans is at risk after a healthcare firm was hit by a cybersecurity attack.

According to the U.S. Department of Health and Human Services Office for Civil Rights, Southern Illinois Dermatology has reported a hacking and IT incident affecting 160,312 individuals, with the breach involving a network server.

In a notice sent to consumers in April, the company said it learned that certain systems within its network had been compromised in November 2025 and that it has launched an investigation with third-party cybersecurity specialists.

The review later determined files potentially accessed or acquired in March by an unauthorized third party contained personal and protected health information.

The company says the potentially affected data may have included names, addresses, dates of birth, Social Security numbers, phone numbers, email addresses and medical record numbers, with the exact information varying by individual. It also says it had no indication of identity theft or fraud resulting from the incident at the time notices were issued.

HIPAA Journal separately reports that the investigation confirmed unauthorized access to parts of the network where patient data was stored and that files may have been copied.

The publication also says notification letters began going out on April 2, 2026 and that a threat group claimed responsibility and posted sample data online. Southern Illinois Dermatology says it has taken steps to strengthen its cybersecurity practices following the incident.

Follow us on X, Facebook and Telegram
Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
Surf The Daily Hodl Mix